Generate a DPoP bound access token from Identity Server
To obtain a DPoP-bound access token from the identity server, perform the following steps:
Generate a DPoP proof: Use the private key from the previous step to generate a DPoP token which includes all claims specified by the identity server.
Request access token from the identity server: Add the DPoP proof in the request to the identity server. The resulting access token contains a
cnf
(confirmation) claim, binding it to the public key.
Support for DPoP-bound JWTs will be available in CipherTrust Manager 2.22 and higher versions.